This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier: Cb8jm0nLRqiQTPQUHY21EG978X25zlJZWYH0Hs8iX18=
Subject key identifier: C0:78:16:C3:04:04:88:52:C3:DA:50:1D:5D:DC:85:32:DE:8D:A4:B1
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial: 0AB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number: 0AAD
Signing time: Sat 06 Dec 2025 18:46:10 +0000
Manifest this update: Sat 06 Dec 2025 18:46:09 +0000
Manifest next update: Sat 13 Dec 2025 18:46:09 +0000
Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: O5C+wvKkXKqcGP3+Peeca07ztUyfxth9xz6DTm0eXOM=)
2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: mb1FJ1ZS6esstfDqUEL1wYQIE+BKhyKC1hq9B43udJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2741 (0xab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Validity
Not Before: Dec 6 18:46:09 2025 GMT
Not After : Dec 13 18:46:09 2025 GMT
Subject: CN=693479f2-4540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:dd:70:0c:1f:4f:e2:ec:d3:58:35:bf:62:
a0:bc:3c:2f:c8:1c:f9:d1:f3:91:9d:7e:5a:b6:4a:
74:22:10:a8:c8:44:6f:95:cd:3e:35:fa:5d:de:84:
7e:b7:4c:29:fa:45:d2:30:b8:68:23:c9:14:99:a0:
c5:a4:de:4f:f2:69:d4:66:1a:cb:9e:9e:a0:56:e1:
c0:e8:91:1a:49:9f:b0:89:84:0d:cc:84:92:2e:2e:
6e:35:bc:20:9a:3a:ea:b2:82:c1:3f:5f:fa:34:d8:
a4:33:1c:41:5e:a7:10:4d:2a:42:27:03:27:36:5c:
07:4d:6a:3b:c4:50:53:5c:2a:da:a7:ab:42:2b:5f:
14:33:0f:3e:7e:66:2e:db:42:d5:24:bb:7b:99:88:
74:6f:fc:67:c5:35:52:58:ca:4a:57:0e:24:a2:ed:
6c:4f:39:25:76:fc:ec:57:c8:66:75:a3:ad:1c:4d:
dc:49:2f:1b:dc:e2:73:0d:a8:38:d8:04:5e:cf:14:
39:f7:b6:1c:21:ed:d8:8a:07:e6:55:1b:3d:a4:74:
29:07:bd:53:e0:ca:45:ad:47:29:7c:ec:48:dd:3c:
c3:13:f4:9f:0b:a4:12:7b:7e:54:0b:60:74:54:69:
ea:92:bd:9d:d7:de:64:e5:52:58:91:c5:ee:27:c2:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:16:C3:04:04:88:52:C3:DA:50:1D:5D:DC:85:32:DE:8D:A4:B1
X509v3 Authority Key Identifier:
keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5b:26:19:d9:88:0e:75:18:30:d2:c1:87:e0:c8:4b:de:74:
a8:92:b9:3e:2c:9f:db:e7:0e:78:6e:ae:7b:2a:34:08:d4:35:
64:c3:c7:00:af:19:2b:6b:27:0f:be:c5:13:b1:e5:68:3b:02:
9e:c1:ec:a3:b2:40:a9:7a:d1:29:d1:3e:a3:33:06:2f:1c:6a:
e0:22:ae:c6:56:9f:45:9f:17:42:de:e3:e3:6e:6b:28:0e:a2:
8f:00:bf:c5:a8:f9:7f:da:52:95:12:02:74:7b:97:46:0e:cf:
d5:2a:d4:14:79:11:3c:17:5d:4e:8a:57:7b:d1:e1:79:5e:bb:
4a:1d:4a:b2:90:74:ca:67:3c:b6:c5:19:3f:dc:71:43:52:4d:
ae:0b:86:be:8c:cd:a1:02:5f:d5:03:22:ac:83:42:e5:f7:5d:
e6:c4:67:4f:6c:4d:0c:b4:6b:21:b2:27:f4:43:bf:44:2e:73:
ff:76:f2:03:f7:d3:5a:8e:5d:51:74:a0:3a:ed:aa:37:7f:08:
91:80:0d:f3:a2:27:d0:c1:b6:dd:04:a6:82:6d:76:63:61:ac:
8c:26:8b:fe:e1:89:4b:71:01:25:7c:da:87:3d:b2:c8:d8:6e:
c7:fa:aa:b6:de:bc:cb:64:90:19:f8:71:ad:3d:b4:d1:4d:ee:
37:fe:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:28 2025 by rpki-client